CVE-2019-14308

Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execution via crafted requests to the LPD service. Affected firmware versions depend on the printer models. One affected configuration is...

PT-2019-13599

Name of the Vulnerable Software and Affected Versions Ricoh SP C250DN firmware versions up to 1.06 Ricoh SP C250SF firmware versions up to 1.12 Description The issue affects several Ricoh printer models, including the SP C250DN and SP C250SF, due to buffer overflows when parsing LPD packets. This...

PT-2019-13597

Name of the Vulnerable Software and Affected Versions Ricoh SP C250DN firmware versions up to 1.06 Ricoh SP C250SF firmware versions up to 1.12 Description The issue affects several Ricoh printer models, where multiple buffer overflows occur when parsing HTTP parameter settings for various...

CVE-2019-14308: Improper Restriction of Operations within the Bounds of a Memory Buffer

Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execution via crafted requests to the LPD service. Affected firmware versions depend on the printer models. One affected configuration is...

PT-2019-13598

Name of the Vulnerable Software and Affected Versions Ricoh SP C250DN firmware versions up to 1.06 Ricoh SP C250SF firmware versions up to 1.12 Description The issue affects several Ricoh printer models, where multiple buffer overflows occur when parsing HTTP parameter settings for SNMP. This...

PT-2019-13596

Name of the Vulnerable Software and Affected Versions Ricoh SP C250DN firmware versions up to 1.06 Ricoh SP C250SF firmware versions up to 1.12 Description The issue affects several Ricoh printer models, where multiple buffer overflows occur when parsing HTTP cookie headers. This allows an attack...

Preview of Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB4512196)

Preview of Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 KB4512196 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 This update is included in the Preview of Quality Rollup that's...

Proface America SP-5400WA Control Panel

Binary data 764820.prm...

Proface America SP-5700WC Control Panel

Binary data 764810.prm...

Proface America SP-5800WC Control Panel

Binary data 764809.prm...

CVE-2019-11991

CVE-2019-11991 concerns a remote information-disclosure vulnerability in HPE 3PAR Service Processor (SP) versions 4.1 through 4.4. The flaw affects the SP itself and any managed 3PAR arrays, potentially compromising confidentiality, integrity, and availability. The supplied connected documents co...

PT-2019-12624

Name of the Vulnerable Software and Affected Versions HPE 3PAR Service Processor SP versions 4.1 through 4.4 Description A remote information disclosure issue exists, potentially disrupting the confidentiality, integrity, and availability of the Service Processor and managed 3PAR arrays...

CVE-2019-11991: Exposure of Sensitive Information to an Unauthorized Actor

HPE has identified a vulnerability in HPE 3PAR Service Processor SP version 4.1 through 4.4. HPE 3PAR Service Processor SP version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service...

CVE-2019-9836

Secure Encrypted Virtualization SEV on Advanced Micro Devices AMD Platform Security Processor PSP; aka AMD Secure Processor or AMD-SP 0.17 build 11 and earlier has an insecure cryptographic implementation...

CVE-2019-9836

Technical details about CVE-2019-9836 are not publicly available in the provided connected documents. The materials reference kernel-firmware updates and CVE linkage, but do not specify affected products/versions, root cause, or fixes. Monitor for updates.

CVE-2019-9836: Use of a Broken or Risky Cryptographic Algorithm

Secure Encrypted Virtualization SEV on Advanced Micro Devices AMD Platform Security Processor PSP; aka AMD Secure Processor or AMD-SP 0.17 build 11 and earlier has an insecure cryptographic implementation...

CVE-2019-12346

In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAMLResponse XML post...

Code injection

In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAMLResponse XML post...

online.defensoria.sp.gov.br Cross Site Scripting vulnerability

Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting online.defensoria.sp.gov.br website and its users. Following...

PT-2019-12760

Name of the Vulnerable Software and Affected Versions miniOrange SAML SP Single Sign On plugin versions prior to 4.8.73 Description The issue concerns a vulnerability in the SAML Login Endpoint, which is susceptible to XSS attacks via a specially crafted SAMLResponse XML post. Recommendations For...